376 reputation
18
bio website Delphi.org
location Boise, ID
age 40
visits member for 2 years, 9 months
seen Jan 30 '13 at 17:20

Lead World Wide Developer Evangelist for Embarcadero Technologies

Invented and patented swipe to unlock in 2000. See US Patent # 8352745 & 6766456, and others.

Host of the Podcast at Delphi.org. (mostly a blog, but some podcast episodes).

Preferred Languages:

  1. Delphi / Object Pascal
  2. C# / .NET
  3. JavaScript
  4. Java
  5. C++
  6. Objective-C

Oct
23
awarded  Popular Question
Oct
5
revised Salting when encrypting?
deleted 2 characters in body
Sep
24
comment Which is more secure using a CSPRNG for a One-time pad, or AES?
@Thomas No, I just wanted to clarify my question based on the answers.
Sep
21
revised Which is more secure using a CSPRNG for a One-time pad, or AES?
added 80 characters in body
Sep
19
asked Which is more secure using a CSPRNG for a One-time pad, or AES?
Sep
4
accepted How to encrypt data and know it will be secure for at least a few decades?
Sep
3
comment How to encrypt data and know it will be secure for at least a few decades?
@poncho Ah, good advice. This is what happens when I get creative. I forget the fundamentals.
Sep
3
comment How to encrypt data and know it will be secure for at least a few decades?
Thanks Simon. Good advice. Was not familiar with GCM but will do some research and see if I can find an implementation. Was going to use CBC.
Sep
2
comment How to encrypt data and know it will be secure for at least a few decades?
@poncho The key and ciphertext are held by two different parties until the time comes for decryption. The objective for the encryption is to be sure neither party can decrypt the message without the other.
Sep
2
comment How to encrypt data and know it will be secure for at least a few decades?
@CodesInChaos The keys will be stored on a sperate system. Obviously if the key is compromised then the system fails. That is true if I just use AES one time. Does nesting different algorithms help against cryptanalysis and brute force?
Sep
2
comment How to encrypt data and know it will be secure for at least a few decades?
Hadn't considered hashing together CSPRNGs.
Sep
2
comment How to encrypt data and know it will be secure for at least a few decades?
Like I said, I'm fine with overkill. Does combining Serpent and Rijndael like I'm describing improve the strength?
Sep
2
comment How to encrypt data and know it will be secure for at least a few decades?
@PaĆ­loEbermann Prefer resistance to cryptanalysis as well as brute force. Updated question.
Sep
2
revised How to encrypt data and know it will be secure for at least a few decades?
added 178 characters in body
Sep
2
comment How to encrypt data and know it will be secure for at least a few decades?
@CodesInChaos Was going to use a system level CSPRNG. I would be using CBC with a random IV generated with each key. There would be a single hash stored for the original message, not for each level of nesting.
Sep
2
asked How to encrypt data and know it will be secure for at least a few decades?
Jul
12
awarded  Yearling
Jan
12
revised two public keys with same passphrase insecure? | can two hashes be compared?
added 33 characters in body
Jan
12
revised two public keys with same passphrase insecure? | can two hashes be compared?
A good simple explanation of RSA.
Jan
11
awarded  Commentator